https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T09:31:40.802897+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-13471 CVE-2024-13471 — DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_importe… 2026-10-12T09:31:40.803940+00:00

Affected: DesignThemes Core Features

The DesignThemes Core Features plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dt_process_imported_file function in all versions up to, and including, 4.7. This makes it possible for unauthenticated attackers to read arbitrary files on the underlying operating system.